Identity Theft Recovery: What to Do First, Next and Later

Identity theft happens when someone uses your personal information, such as your name, Social Security number or account details, to open accounts, make purchases or file taxes. Recovery takes time, but the steps are clear and most are free. This guide puts them in order. Checked October 25, 2026.

Signs your identity may have been stolen

• A bill you normally get stops arriving, which can mean someone changed your address.
• Charges you didn’t make, or bills for things you didn’t buy.
• Withdrawals from your bank account you didn’t make.
• Accounts on your credit report you don’t recognize.
• A notice that more than one tax return was filed in your name.

Step 1: Contact the companies where fraud happened

1. Call each company’s fraud department and say someone stole your identity.
2. Ask them to close or freeze the affected accounts.
3. Change the passwords and PINs for those accounts, and turn on two-step verification.

Step 2: Place a fraud alert and check your credit

• Fraud alert: contact one of the three credit bureaus (Equifax, Experian or TransUnion). That bureau must tell the other two. The alert is free, lasts one year and can be renewed. Businesses must verify your identity before opening new credit.
• Credit reports: get your free reports at AnnualCreditReport.com or 877-322-8228 and look for accounts you don’t recognize.
• Credit freeze: a freeze blocks new credit accounts and is free to place and lift. It’s the strongest protection. See our Credit Freeze Review.

Step 3: Report it to the FTC

Go to IdentityTheft.gov and answer the questions. You’ll get an FTC Identity Theft Report and a recovery plan that updates as you go. You can use the report to dispute fraudulent accounts and debts.

Next steps, depending on what was stolen

• Bank or card accounts: dispute the charges in writing and ask for new cards.
• Email or phone account: recover the account and secure it first, because it’s used to reset everything else. See Hacked Accounts and SIM Swaps.
• Taxes: IdentityTheft.gov’s plan walks you through reporting tax identity theft to the IRS.
• Social Security benefits: check your my Social Security account for changes to your address or direct deposit.
• Medical identity theft: review your Medicare or insurance statements. See Medicare Fraud.
• A child’s identity: see How to Freeze a Child’s Credit.

Avoid recovery scams

You don’t need to pay anyone to recover from identity theft. Be wary of calls offering to “fix” your identity or credit for a fee, or asking you to confirm your Social Security number. See Recovery and Refund Scams.

Protect yourself going forward

• Keep a credit freeze in place and lift it only when you apply for credit.
• Use a password manager and two-step verification. See A Password Manager for a Household.
• Shred documents with personal information and collect mail promptly.
• Don’t share your Social Security number with anyone who calls, texts or emails you unexpectedly.

Quick checklist

• Called the fraud department of each affected company
• Placed a fraud alert with one credit bureau
• Pulled free credit reports
• Filed a report at IdentityTheft.gov
• Froze credit at all three bureaus

Frequently asked questions

Do I need a police report?
Not always. The FTC Identity Theft Report from IdentityTheft.gov is accepted by many companies. Some may still ask for a police report.

Can I have a fraud alert and a freeze at the same time?
Yes. The FTC recommends a fraud alert even if you already have a freeze.

Will this hurt my credit score?
No. Fraud alerts, freezes and checking your own reports don’t lower your score.

Sources

• How to recover from identity theft, FTC Consumer Advice, accessed October 25, 2026
• What To Know About Identity Theft, FTC Consumer Advice, accessed October 25, 2026
• Recovery Steps, IdentityTheft.gov, accessed October 25, 2026